CVE-2026-6382

Several WordPress plugins are vulnerable to OS Command Injection due to improper escaping of parameters before they are passed to a shell command during image processing operations. Affected products include FileOrganizer (before 1.1.9), Advanced File Manager (before 5.4.12), File Manager Pro (be...